cn.com.bsfit.UMO.UMOWelcomeActivity
android.intent.action.MAIN
com.tencent.tauth.AuthActivity
android.intent.action.VIEW
General
-
Target
a994ab5681e19bfa810aab37c43a61b0_JaffaCakes118
-
Size
29.2MB
-
MD5
a994ab5681e19bfa810aab37c43a61b0
-
SHA1
776b26de2f857f63c41feb3edf6a50b2201edcee
-
SHA256
139057bbe35f6969a0ff5303ae403c4eba6da3289960a033715d5fa0775698b6
-
SHA512
cdf752f79a149cf375f934966352170af07cf1ecb88f310aa111a1b9699b42e868f9e9eace03506edfb4f11c9c5923cf5cbd574fcdb4aebea5bc8b9f8c5f0c3d
-
SSDEEP
786432:I8ZpOFeiGfNYT1CrzkaBUqtmrmXztsygcmPTunNvlc2m8/LU:ZUFT1yzmqtmr4PgVPTB
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Requests dangerous framework permissions 10 IoCs
Files
-
a994ab5681e19bfa810aab37c43a61b0_JaffaCakes118
com.fivefu.huzhoutxcg
cn.com.bsfit.UMO.UMOWelcomeActivity
-
amap_resource1_0_0.png
com.example.amapsdkv2
Android Permissions
a994ab5681e19bfa810aab37c43a61b0_JaffaCakes118
Permissions
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.CALL_PHONE
android.permission.GET_TASKS
android.permission.REORDER_TASKS
android.permission.RECEIVE_BOOT_COMPLETED